IN THE CLAIMS : 

-1 (Currently amended). A system for facilitating secure communications over a 
network, wherein said network is accessed by a network interface including a voice browser 
for receiving voice signals from a user and accessing and navigating web sites said n e twork in 
accordance with said received voice signals, said system comprising: 

a security module to facilitate retrieval of information from said user in the form of 
voice signals and to identify security related information received by said network interface 
from a secure n e twork web site in response to said n e twork int e rface voice browser accessing 
said secure n e twork web site based on voice commands from said use r, wherein said security 
related information includes information enabling a secure session with said secure web site ; 

a storage unit to store remote from said network interface voice and security 
information associated with authorized users of said system , wherein said security 
information includes information enabling negotiation of parameters for secure sessions with 
secure web sites ; and 

a security system to communicate with said security module and said storage unit and 
to process for said network interface said identified security information to enable said secure 
session, wherein said security system includes including : 

a verification module to verify said user as an authorized system user based on 
a comparison of said user voice signals with said stored voice information; 

a retrieval module to retrieve said security information of said verified user 
from said storage unit; and 

a negotiation module to receive said identified security information from said 
security module and negotiate communication parameters with said secure n e twork web site 
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utilizing said retrieved security information in r e sponse to r e ceiving said identifi e d s e curity 
information from said security modul e to facilitate said secure session communications ov e r 
said n e twork between that site and said network int e rfac e voice browser . 



2 (Original). The system of claim 1 wherein said network includes the Internet. 

3 (Original). The system of claim 1 wherein said network interface is in 
communication with a communications device located remotely of said network interface, and 
said security module facilitates retrieval of said user voice signals from said communications 
device. 

4 (Original). The system of claim 3 wherein said communications device includes a 
telephone. 

5 (Original). The system of claim 3 wherein said communications device includes a 
computer system having an audio input device. 

6 (Original). The system of claim 5 wherein said audio input device includes a 
microphone. 

7 (Currently amended). The system of claim 1 wherein said security module 
includes: 
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an identification module to identify said security related information received by said 
network interface from said secure n e twork web site; 

a communications module to facilitate communications with said security system and 
said network interface, wherein said communications module includes: 

a send module to provide said user information and said identified security 
information to said security system to facilitate verification of said user and negotiation of 
said communication parameters; 

a receive module to receive a request for said user information, verification 
results, responses to said identified security information and said negotiated communication 
parameters from said security system; and 

an interface module for providing said responses and said negotiated 
parameters to said network interface to facilitate secure communications over said network 
between said secure n e twork web site and said n e twork int e rfac e voice browser ; and 

a user interface module to facilitate said user information request for retrieval of said 
user information and to provide said verification results to said user. 

8 (Previously presented). The system of claim 7 wherein said security system 
further includes: 

an identification verification module to validate an identification within said user 
information associated with an authorized system user; 

an access module to retrieve said voice information from said storage unit associated 
with said identification; 
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a selection module to select portions of said retrieved voice information and generate 
said user information request, wherein said generated request includes a request for user 
information corresponding to said selected portions of said retrieved voice information, and 
wherein said verification module verifies said user by comparing said user voice signals 
received from said security module in response to said user information request with said 
stored voice information associated with an authorized user identified by said identification 
and said negotiation module processes said identified security information received from said 
security module and generates said responses thereto with said retrieved security information 
to negotiate said communication parameters; and 

a security communications module to facilitate communications with said security 
module, wherein said security communications module includes: 

a security send module to provide said user information request, said 
verification results, said generated responses and said negotiated parameters to said security 
module; and 

a security receive module to receive said user voice signals and said identified 
security information from said security module. 

9 (Original). The system of claim 1 wherein said storage unit includes a database. 

10 (Original). The system of claim 2 wherein said stored security information 
includes private keys and certificates of said authorized system users. 

1 1 (Original). The system of claim 1 further including: 
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an enrollment module to retrieve voice signals from said authorized system users and 
process said authorized system user voice signals to produce said voice information for 
storage in said storage unit. 

12 (Currently amended). A program product apparatus having a computer 
readable medium with computer program logic recorded thereon for facilitating secure 
communications over a network, wherein said network is accessed by a network interface 
including a voice browser for receiving voice signals from a user and accessing and 
navigating web sites said n e twork in accordance with said received voice signals, said 
program product apparatus comprising: 

a security module for said network interface to facilitate retrieval of information from 
said user in the form of voice signals and to identify security related information received by 
said network interface from a secure n e twork web site in response to said n e twork int e rfac e 
voice browser accessing said secure n e twork web site based on voice commands from said 
user , wherein said security related information includes information enabling a secure session 
with said secure web site ; 

a storage module to store remote from said network interface voice and security 
information associated with authorized users , wherein said security information includes 
information enabling negotiation of parameters for secure sessions with secure web sites ; and 

a secure communications module for a security system to communicate with said 
security module and said storage module and to process for said network interface said 
identified security information to enable said secure session, wherein said secure 
communications module includes including : 
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a verification module to verify said user as an authorized user based on a 
comparison of said user voice signals with said stored voice information; 

a retrieval module to retrieve said security information of said verified user 
from said storage module; and 

a negotiation module to receive said identified security information from said 
security module and negotiate communication parameters with said secure network web site 
utilizing said retrieved security information in r e spons e to r e c e iving said id e ntifi e d s e curity 
information from said s e curity modul e to facilitate said secure session communications ov e r 
said n e twork between that site and said n e twork int e rfac e voice browser . 

13 (Currently amended). The program product apparatus of claim 12 wherein said 
security module includes: 

an identification module to identify said security related information received by said 
network interface from said secure n e twork web site; 

a communications module to facilitate communications with said secure 
communications module and said network interface, wherein said communications module 
includes: 

a send module to provide said user information and said identified security 
information to said secure communications module to facilitate verification of said user and 
negotiation of said communication parameters; 
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a receive module to receive a request for said user information, verification 
results, responses to said identified security information and said negotiated communication 
parameters from said secure communications module; and 

an interface module for providing said responses and said negotiated 
parameters to said network interface to facilitate secure communications over said network 
between said secure network web site and said network interface voice browser ; and 

a user interface module to facilitate said user information request for retrieval of said 
user information and to provide said verification results to said user. 

14 (Previously presented). The program product apparatus of claim 13 wherein said 
secure communications module further includes: 

an identification verification module to validate an identification within said user 
information associated with an authorized user; 

an access module to retrieve said voice information from said storage module 
associated with said identification; 

a selection module to select portions of said retrieved voice information and generate 
said user information request, wherein said generated request includes a request for user 
information corresponding to said selected portions of said retrieved voice information, and 
wherein said verification module verifies said user by comparing said user voice signals 
received from said security module in response to said user information request with said 
stored voice information associated with an authorized user identified by said identification 
and said negotiation module processes said identified security information received from said 
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security module and generates said responses thereto with said retrieved security information 
to negotiate said communication parameters; and 

a security communications module to facilitate communications with said security 
module, wherein said security communications module includes: 

a security send module to provide said user information request, said 
verification results, said generated responses and said negotiated parameters to said security 
module; and 

a security receive module to receive said user voice signals and said identified 
security information from said security module. 

15 (Original). The program product apparatus of claim 12 further including: 

an enrollment module to retrieve voice signals from said authorized users and process 
said authorized user voice signals to produce said voice information for storage in said storage 
module. 

16 (Currently amended). A carrier signal having computer program logic 
embedded therein for facilitating secure communications over a network, wherein said 
network is accessed by a network interface including a voice browser for receiving voice 
signals from a user and accessing and navigating web sites said n e twork in accordance with 
said received voice signals, said carrier signal comprising: 

a security module for said network interface to facilitate retrieval of information from 
said user in the form of voice signals and to identify security related information received by 
said network interface from a secure n e twork web site in response to said network int e rfac e 
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voice browser accessing said secure network web site based on voice commands from said 
use r, wherein said security related information includes information enabling a secure session 
with said secure web site ; 

a storage module to store remote from said network interface voice and security 
information associated with authorized users , wherein said security information includes 
information enabling negotiation of parameters for secure sessions with secure web sites ; and 
a secure communications module for a security system to communicate with said 
security module and said storage module and to process for said network interface said 
identified security information to enable said secure session, wherein said secure 
communications module includes including : 

a verification module to verify said user as an authorized system user based on 
a comparison of said user voice signals with said stored voice information; 

a retrieval module to retrieve said security information of said verified user 
from said storage module; and 

a negotiation module to receive said identified security information from said 
security module and negotiate communication parameters with said secure n e twork web site 
utilizing said retrieved security information in r e sponse to r e ceiving said id e ntifi e d s e curity 
information from said s e curity modul e to facilitate said secure session communications ov e r 
said network between that site and said n e twork int e rface voice browser . 
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17 (Currently amended). The carrier signal of claim 16 wherein said security 
module includes: 

an identification module to identify said security related information received by said 
network interface from said secure n e twork web site; 

a communications module to facilitate communications with said secure 
communications module and said network interface, wherein said communications module 
includes: 

a send module to provide said user information and said identified security 
information to said secure communications module to facilitate verification of said user and 
negotiation of said communication parameters; 

a receive module to receive a request for said user information, verification 
results, responses to said identified security information and said negotiated communication 
parameters from said secure communications module; and 

an interface module for providing said responses and said negotiated 
parameters to said network interface to facilitate secure communications over said network 
between said secure n e twork web site and said n e twork int e rface voice browser ; and 

a user interface module to facilitate said user information request for retrieval of said 
user information and to provide said verification results to said user. 

18 (Previously presented). The carrier signal of claim 17 wherein said secure 
communications module includes: 

an identification verification module to validate an identification within said user 
information associated with an authorized user; 
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an access module to retrieve said voice information from said storage module 
associated with said identification; 

a selection module to select portions of said retrieved voice information and generate 
said user information request, wherein said generated request includes a request for user 
information corresponding to said selected portions of said retrieved voice information, and 
wherein said verification module verifies said user by comparing said user voice signals 
received from said security module in response to said user information request with said 
stored voice information associated with an authorized user identified by said identification 
and said negotiation module processes said identified security information received from said 
security module and generates said responses thereto with said retrieved security information 
to negotiate said communication parameters; and 

a security communications module to facilitate communications with said security 
module, wherein said security communications module includes: 

a security send module to provide said user information request, said 
verification results, said generated responses and said negotiated parameters to said security 
module; and 

a security receive module to receive said user voice signals and said identified 
security information from said security module. 

19 (Original). The carrier signal of claim 16 further including: 

an enrollment module to retrieve voice signals from said authorized users and process 
said authorized user voice signals to produce said voice information for storage in said storage 
module. 
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20 (Currently amended). A method of facilitating secure communications over a 
network, wherein said network is accessed by a network interface including a voice browser 
for receiving voice signals from a user and accessing and navigating web sites said n e twork in 
accordance with said received voice signals, said method comprising the steps of: 

(a) retrieving, via a security module, information from said user in the form of 
voice signals and identifying security related information received by said network interface 
from a secure n e twork web site in response to said n e twork int e rfac e voice browser accessing 
said secure n e twork web site based on voice commands from said user , wherein said security 
related information includes information enabling a secure session with said secure web site ; 

(b) storing remote from said network interface voice and security information 
associated with authorized users in a storage unit , wherein said security information includes 
information enabling negotiation of parameters for secure sessions with secure web sites ; 

(c) verifying said user as an authorized user based on a comparison of said user 
voice signals with said stored voice information via a security system; 

(d) retrieving, via said security system, said security information of said verified 
user from said storage unit; and 

(e) receiving said identified security information from said security module at said 
security system and negotiating communication parameters for said network interface with 
said secure n e twork web site utilizing said retrieved security information in r e spons e to said 
identifi e d s e curity information to facilitate said secure session communications ov e r said 
n e twork between that site and said n e twork interface voice browser . 



21 (Original). The method of claim 20 wherein said network includes the Internet. 
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22 (Original). The method of claim 20 wherein said network interface is in 
communication with a communications device located remotely of said network interface, and 
step (a) further includes: 

(a.l) retrieving said user voice signals from said communications device. 

23 (Original). The method of claim 22 wherein said communications device includes 
a telephone. 

24 (Original). The method of claim 22 wherein said communications device includes 
a computer system having an audio input device. 

25 (Original). The method of claim 24 wherein said audio input device includes a 
microphone. 

26 (Currently amended). The method of claim 20 wherein step (a) further 
includes: 

(a.l) providing said user information to said security system to facilitate verification 
of said user in response to a request from said security system for user information; 

(a.2) receiving verification results from said security system and providing said 
verification results to said user; 

(a.3) providing said identified security information to said security system to 
facilitate negotiation of said communication parameters; 
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(a.4) receiving responses to said identified security information and said negotiated 
communication parameters from said security system; and 

(a.5) providing said responses and said negotiated parameters to said network 
interface to facilitate secure communications over said network between said secure network 
site and said n e twork int e rfac e voice browser . 

27 (Currently amended). The method of claim 26 wherein step (c) further 
includes: 

(c.l) validating an identification within said user information associated with an 
authorized user; 

(c.2) retrieving said voice information from said storage unit associated with said 
identification; 

(c.3) selecting portions of said retrieved voice information and generating said user 
information request, wherein said generated request includes a request for user information 
corresponding to said selected portions of said retrieved voice information; and 

(c.4) verifying said user by comparing said user voice signals received from said 
security module in response to said user information request with said stored voice 
information associated with an authorized user identified by said identification and providing 
said verification results to said security module; and 

step (e) further includes: 

(e.l) processing said identified security information received from said security 
module and generating said responses thereto with said retrieved security information to 
negotiate said communication parameters; and 
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(e.2) providing said responses and negotiated parameters to said security module to 
facilitate secure communications over said network between said secure network web site and 
said n e twork interfac e voice browser , 

28 (Original). The method of claim 20 wherein said storage unit includes a database. 

29 (Original). The method of claim 21 wherein said stored security information 
includes private keys and certificates of said authorized users. 

30 (Previously presented). The method of claim 20 further including the step of: 

(f) retrieving voice signals from said authorized users and processing said 
authorized user voice signals to produce said voice information for storage in said storage 
unit. 

3 1 (Currently amended). A system for facilitating secure communications over a 
network, wherein said network is accessed by a network interface including a voice browser 
for receiving voice signals from a user and accessing and navigating web sites said n e twork in 
accordance with said received voice signals, said system comprising: 

a verification unit to verify said user as an authorized user based on a comparison of 
said user voice signals with stored voice information of authorized users; and 

a negotiation unit to retrieve security information of said verified use r, including 
information enabling secure sessions with secure web sites, remotely stored from said 
network interface and to negotiate communication parameters for said network interface with 
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a secure n e twork web site accessed by said voice browser utilizing said retrieved security 
information to facilitate a secure session communications ov e r said network between that site 
and said network int e rfac e voice browser in response to said voice browser n e twork int e rfac e 
accessing said secure n e twork web site based on voice commands from said user. 

32 (Original). The system of claim 31 wherein said network includes the Internet. 

33 (Original). The system of claim 31 wherein said network interface is in 
communication with a communications device located remotely of said network interface to 
receive said user voice signals. 

34 (Currently amended). A method of facilitating secure communications over a 
network, wherein said network is accessed by a network interface including a voice browser for 
receiving voice signals from a user and accessing and navigating web sites said n e twork in 
accordance with said received voice signals, said method comprising the steps of: 

(a) verifying said user as an authorized user based on a comparison of said user voice 
signals with stored voice information of authorized users; and 

(b) retrieving security information of said verified use r, including information 
enabling secure sessions with secure web sites, remotely stored from said network interface and 
negotiating communication parameters for said voice browser with a secure n e twork web site 
accessed by said voice browser utilizing said retrieved security information to facilitate a secure 
session communications ov e r said n e twork between that site and said n e twork interfac e voice 
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browser in response to said voice browser n e twork int e rfac e accessing said secure n e twork web 
site based on voice commands from said user. 

35 (Original). The method of claim 34 wherein said network includes the Internet. 

36 (Original). The method of claim 34 wherein said network interface is in 
communication with a communications device located remotely of said network interface to 
receive said user voice signals.- 
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